Privacy Policy

Last updated: August 2, 2026

Kozi ("we", "our", or "us") operates the Kozi real estate platform at kozi.homes - including app.kozi.homes and agent-branded subdomains (e.g. yourname.kozi.homes) - and related services (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

By creating an account or using the Platform, you consent to the practices described in this policy. If you do not agree, do not use the Platform.

1. Information We Collect

a) Information you provide

• Account data: first name, last name, email address, phone number.
• Agent data (if applicable): brokerage name, profile photo, license information.
• Communications: messages you send to agents or support through the Platform.

b) Information collected automatically

• Usage data: listings viewed, saved, compared, and shared; searches performed; filters applied; map interactions; time spent on pages.
• Inferred preferences: budget range, preferred location, property type, and amenity affinities - derived from your browsing behaviour to personalize your experience.
• Device & session data: IP address, browser user agent, session identifiers, and approximate geolocation (city/region level) - used for security, rate limiting, and fraud prevention.
• Cookies & local storage: authentication tokens, theme preferences, and session state.
• Advertising measurement: if you arrive from one of our ads, we may record the ad-click identifiers attached to the link (e.g. UTM parameters, Meta's fbclid) and, where our Meta Pixel is enabled, Meta Platforms may set its _fbp/_fbc cookies on your browser. We use these solely to measure whether our own advertising works - not to track your browsing on other sites - and we may send Meta a hashed (SHA-256) version of your email or phone number so conversions can be matched to the ad. You can block these cookies in your browser settings, and Meta's own use of this data is described in Meta's privacy policy.

c) Listing data

All property listings displayed on the Platform are sourced from third-party Multiple Listing Service (MLS) data feeds. When you interact with listings (saving, comparing, requesting showings), we record that interaction to improve your experience and, where you have requested it, to share relevant information with a connected agent.

2. How We Use Your Information

• To create and maintain your account.
• To personalize the For You feed, search results, and listing recommendations.
• To send you listing alerts, price change notices, and open-house reminders you opt into.
• To match you with agents who have opted into the Kozi lead program - only after you explicitly initiate contact.
• To operate anti-abuse, rate-limiting, and fraud-prevention controls.
• To improve Platform features through aggregated, anonymized analytics.
• To comply with legal obligations.

3. Legal Basis & PIPEDA Compliance

Visitors browsing without an account are not behaviorally tracked or profiled. Optional personalization and product analytics begin only when you create an account, where they are disclosed alongside the terms you accept at signup. Advertising measurement is a separate, optional choice at signup - it is never a condition of creating or keeping an account. Account and security processing remains available when optional tracking is declined. You may change or withdraw any of these choices at any time in Settings (see Your Rights below), though disabling personalization may limit tailored features.

We adhere to PIPEDA's ten fair information principles: accountability, identifying purposes, consent, limiting collection, limiting use / disclosure / retention, accuracy, safeguards, openness, individual access, and challenging compliance.

4. Sharing & Disclosure

• Agents: We share your contact information with a linked agent only when you explicitly request it (e.g. "Request a showing" or "Link an agent").
• Service providers:We use Supabase (database & authentication), Upstash (caching), Vercel (hosting), Resend (transactional email delivery), Sentry (error monitoring - receives technical logs that may include your IP address and browser user agent), Google (maps and address services), and OpenAI (processes the text of search queries you type and, if you use voice search, the audio you record - never MLS® listing data or your browsing history). Each processes data solely to deliver services to us and is bound by confidentiality and data-processing agreements.
• Advertising partners: where our advertising measurement is enabled, we share ad-click identifiers and hashed contact details with Meta Platforms as described in section 1(b), solely to measure our own ad campaigns.
• MLS® data provider (PropTx): We may share your name, email address, and listing-access records with PropTx Innovations Inc. for purposes of audit, compliance verification, or legal proceedings as required in the administration of the MLS® System, pursuant to our data licence agreement with PropTx.
• Legal requirements: We may disclose information if required by law, court order, or regulatory authority.
• We do not sell your personal information. Ever.

5. Data Retention

We retain your account data for as long as your account is active. If you request deletion, we will remove your personal information within 30 days, except where retention is required by law or for fraud prevention purposes (up to 7 years).

MLS® access records.As a condition of our MLS® data licence with PropTx, we are required to keep a limited access record — your name, email address, username, and an audit trail of your listing access — for at least 180 days after your account’s access credentials expire, so that PropTx can verify compliance with the MLS® rules. Where this obligation applies, that limited record is retained for the required period even after you request deletion of the rest of your account; it is used only for compliance and audit purposes and is then securely destroyed.

Account deletion removes data from our active systems immediately where technically possible. Encrypted database backups and limited records held by our payment, email-delivery, hosting, security, and advertising processors may remain inaccessible to normal use until the provider's ordinary backup, fraud-prevention, financial, or legal retention period expires. We do not restore deleted accounts from backup; if a backup must be restored for disaster recovery, deletion records are reapplied.

Anonymized, aggregated analytics may be retained indefinitely as they cannot identify you.

6. Data Security

We use industry-standard safeguards including TLS encryption in transit, encrypted storage at rest, row-level security in our database, and role-based access controls. No method of transmission or storage is 100% secure; we will notify affected users promptly in the event of a breach as required by PIPEDA.

7. Your Rights

• Access: Request a copy of the personal information we hold about you.
• Correction: Ask us to correct inaccurate information.
• Deletion: Delete your behavioral history from Settings, or request erasure of your account and associated personal data.
• Withdrawal of consent: Opt out of personalization, product analytics, or advertising measurement at any time from the Privacy & personalization section in Settings.
• Notifications: Manage all in-app notification categories at /settings/notifications.

To exercise any of these rights, email jvalente@kozi.homes. We will respond within 30 days.

8. Children's Privacy

The Platform is not directed to individuals under 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, contact us and we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be announced via in-app banner or email at least 14 days before they take effect. Continued use after that date constitutes acceptance of the updated policy.

10. Contact & Complaints

Privacy Officer - Kozi
Email: jvalente@kozi.homes

If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.